Privacy Policy

Privacy Policy – Way To Do App

Effective Date: 1/6/26

Way To Do (“we,” “our,” or “the app”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, your rights, and how we comply with Apple’s App Store requirements and applicable privacy laws. All amounts and references are in USD unless stated otherwise.

1. Information We Collect

We collect the following information when you use the app:

• Full name
• Email address
• Location (only when you choose location-based features, such as creating a location-based task)
• Task details and reminders
• Push notification preferences and related metadata (e.g., delivery status)
• Device information and identifiers (such as device model, OS version, and app version) for app functionality, security, and analytics
• Usage data (such as feature usage and performance data) to help improve the app
• If you access Way To Do via a web interface, we may also collect information using cookies or similar technologies (see Section 5).

2. Purpose and Legal Basis for Processing

We use your data for the following purposes:

To provide and operate the app:

• Creating and managing your account
• Creating, storing, and displaying tasks and reminders
• Delivering push notifications and in‑app alerts

To improve and maintain the app:

• Monitoring performance and usage
• Fixing bugs and enhancing features

To communicate with you:

• Responding to support requests
• Sending important service updates and policy changes
• To comply with legal obligations and enforce our terms

Where applicable privacy laws (such as GDPR/UK GDPR) apply, our legal bases for processing may include:

• Contractual necessity: Processing necessary to provide the app and its core functionality (e.g., storing tasks, sending reminders).
• Consent: For optional features such as location-based tasks, certain analytics, or marketing communications; you can withdraw consent at any time in your device settings or by contacting us.
• Legitimate interests: For improving the app, preventing fraud and abuse, and ensuring security, balanced against your rights and interests.

3. Data Storage and Retention

Tasks:

• Free users: tasks are stored for up to 1 month by default.
• Paid users: completed tasks may remain accessible for up to 1 year, unless you delete them sooner.

Account information (name, email):

• Retained while your account is active and for a reasonable period afterward as needed for recordkeeping, security, and legal compliance.

Logs and analytics data:

• Retained for a limited period necessary for troubleshooting, security, and service improvement, after which it is deleted or anonymized.
• Location data is used only at the moment you invoke a location‑based feature and is not stored longer than necessary for that feature to function.

4. Use and Sharing of Data with Third Parties

We do not sell your personal data. We only share personal data with third parties in the following limited situations:

Service providers (processors):

• Hosting: Our infrastructure is hosted on Hostinger VPS (or equivalent providers), which stores and processes your data on our behalf to run the app securely.
• Push notifications: Push notifications are delivered via our own backend and/or platform‑level services (such as Apple Push Notification service), which receive device tokens and minimal metadata needed to deliver messages.
• Location services: We use Google Maps for location-based features. When you use these features, Google may receive location data, IP address, and device information to provide maps and geocoding, under Google’s own privacy policy.

Legal and safety reasons:

• We may disclose data if required by law, court order, or to protect our rights, property, users, or the public.
• We do not share your personal data with third parties for their own marketing or AI training purposes. If we ever wish to use third‑party AI services that process your personal data, we will clearly disclose this and obtain your explicit permission before any such sharing.

5. Cookies, Tracking, and AI Data

If you access Way To Do via a web interface, we may use cookies or similar technologies to:

• Maintain your session and basic app functionality
• Collect anonymous or aggregated analytics on how the app is used
• You will be asked for consent before any tracking or data collection that is not strictly necessary for the service (for example, analytics or personalization in certain jurisdictions).
• We may use your data internally to improve our features and recommendations (e.g., understanding which types of tasks and reminders are most useful), but:
• We do not share your personal data with external AI providers without your explicit consent.
• We do not use your personal data to train third‑party AI models.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encrypted transmission (e.g., HTTPS/TLS)
• Secure access controls and authentication
• Regular updates and security patches
• While we strive to protect your information, no system is completely secure, and we cannot guarantee absolute security.

7. Children’s Privacy

Our app is intended for users aged 16 or older (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children under this age. If we learn that we have collected personal data from a child in violation of applicable law, we will delete that data as soon as possible.

8. International Data Transfers

Your data may be processed in countries other than your own, including where our hosting and service providers are located. Whenever we transfer personal data internationally, we take appropriate measures to ensure it is protected, such as:

• Using service providers that implement adequate safeguards (e.g., standard contractual clauses where required by law)
• Applying technical and organizational measures to keep your data secure

9. Your Rights and Controls

Depending on your location, you may have some or all of the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, for example via account deletion in the app or by contacting us.
• Restriction: Request that we limit how we process certain data.
• Portability (EEA/UK where applicable): Request a copy of your data in a structured, machine‑readable format.
• Objection (EEA/UK where applicable): Object to certain processing, including processing based on legitimate interests or direct marketing.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time (this will not affect prior lawful processing).

To exercise these rights, please contact us at the email or support link below. We may need to verify your identity before fulfilling your request.

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the “Effective Date” at the top of this page, and
• Provide notice in the app or by email where required.

Your continued use of the app after the updated policy takes effect means you accept those changes.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@waytodo.app

Support form: [Insert Link]

We will do our best to respond within a reasonable timeframe and in accordance with applicable law.